problema cruel

dpsspfc
(usa Outra)

Enviado em 13/07/2009 - 14:29h

Eu tenho uma rede com dois servidores provedores, um de ad-windows server 2003 e o outro um linux-slackware(firewall,roteador,squid,dhcp)-"tenho uma sub-rede para cada setor na empresa", de um certo tempo p/cá as maquinas estão demorando muito para entrar no dominio(de 10 a até 45 minutos).já me falaram que isso é dns, mas pq entra em outras redes.
Já fiz os seguintes testes:
-quando coloco a maquina na mesma sub-rede do servidor de AD ela entra beleza no dominio;
-quando desabilito o firewall permanece o problema;
-em duas ou três sub-redes também entra normal;
-O DNS foi tbm verificado, mas eu acho que se fosse dns em nenhuma rede entraria rápido no dominio.certo?
-Não tem nenhuma gpo no dominio.

Queria tirar uma dúvida com vcs:esse problema pode ser no roteador?pois o mesmo que segmenta a rede e algumas funcionam bem e outras não.

Aguardo...
Att,
Danilo Paiva

lejoso
(usa Debian)

Enviado em 28/07/2009 - 09:28h

Seu problema nao esta no dns em si, porem as maquinas que estao nao outra subrede que nao conseguem consultar o dns. Para resolver o problemas, vc tem que interligar estas duas redes, atraves do roteador. Vc pode passar o seguinte comando para o kernel:

iptables -t nat -A POSTROUTING -i eth0 -o eth1 -j MASQUERADE

onde:
eth0-> interface da subrede diferente do AD, é a interface que entram os pacotes
eth1-> interface da rede do AD, é interface por onde saem os pacotes
Verifique corretamente os nomes e substitua se necessario.

Depois desse comando, vc pode tentar pingar o AD de qualquer maquina da subrede diferente do AD, se o ping responder reboota a maquina e vera que vai subir rapido.

Att

dpsspfc
(usa Outra)

Enviado em 28/07/2009 - 14:49h

bom dia amigo,

eu queria lhe dizer que eu consigo ter acesso ao servidor ad da subrede que está demorando tbm, o problema é no carregamanto das configurações.


mas vou testar aqui e te falo...

lejoso
(usa Debian)

Enviado em 30/07/2009 - 12:54h

Bom dia!

E em relação a internet, essas maquinas da rede que demora pra entrar no dominio conseguem acessar a internet normalmente? Se sim, me responde se usa proxy transparente ou configurado no browser. Se usa ele transparente e sua rede nao tiver acesso ao servidor dns, a internet nao funciona, pois a resolução dos nomes acontece antes dos pacotes sairem da maquina. Se funcionar é porque esta conseguindo consultar normalmente o dns. Agora se utiliza proxy no browser, esqueça, pois não dara pra fazer o teste, pois a resolucao de nomes sera feita pelo seu proxy.

Att

dpsspfc
(usa Outra)

Enviado em 30/07/2009 - 13:31h

As maquinas acessam a net normalmente e qualquer poutro serviço depois que está logada.
O proxy nosso é transparente,é o seguinte:
temos um firewall iptables, nele definimos as subrdes da unidade usando as chains PRE, POS, forward,input e output.cada surede tem um arquivo dentro dessas chains por exemplo na chain postrouting para a rede 10.2.7.0 temos o aruivo: rc.T-A07 que tem o conteudo:
#SNAT para todos os servidopres da intranet
$iptables -t nat -A T-A06 -o eth1 -j SNAT --to 10.2.0.254(nosso firewall)
#masquerade para bypass no firewall de salvador
$IPTABLES -t nat T-A06 -d 200.223.95.0/24 -j MASQUERADE
todas as subredes tem um arquivo desse dentro apontando para a chain referente a sua sub.
o que eu notei hj aqui foi que as subredes que estão entrandpo mais rapído no dominio não tem esse arquivo dentro da chain postrouting, por exemplooa subrede 10.2.2.0 e 10.2.3.0 entram normal no dominio mas eu tava olhando aqui e elas não tem o arquivo que descrevi acima definido para elas, mas hj fiz um teste aqui novamente retirei outra esse arquivo da subrede 10.2.7.0 mas continua entrando lento.
não sei se tem que alterar alguma coisa mas retirei o arquivo e reiniciei o firewall, mas não obtive melhora.
será que é esse postrouting que tá fazendo isso?

dpsspfc
(usa Outra)

Enviado em 30/07/2009 - 13:32h

onde se lê A06
lê-se A07

lejoso
(usa Debian)

Enviado em 31/07/2009 - 11:02h

Tenta trocar a linha:

$iptables -t nat -A T-A06 -o eth1 -j SNAT --to 10.2.0.254(nosso firewall)

por

$iptables -t nat -A T-A06 -o eth1 -j MASQUERADE

e veja o que acontece? Caso nao funcione, descreva qtas placas de rede vc tem, quais nomenclaturas, os ips delas etc...

Att,

dpsspfc
(usa Outra)

Enviado em 31/07/2009 - 13:29h

Bom dia o que vc falou não deu certo segue abaixo um log criado pelo tcpdump partindo da rede 10.2.11.0(esse subrede demora)
para o 10.2.0.45 que é o ad.
OBS:Nosso servidor ad funciona interligado a outros ads da matriz e das filiais, para que se um parar de funcionar
agente continuar autenticando nos outros.

rede: 10.2.11.0
brodcast:10.2.11.31

16:38:19.127513
IP 10.2.11.22.2126 > 10.2.0.45.445: P 1051861822:1051861865(43) ack 1943348223 win 64896
16:38:19.127551
IP 10.2.11.22.2126 > 10.2.0.45.445: P 0:43(43) ack 1 win 64896
16:38:19.128173
IP 10.2.0.45.445 > 10.2.11.22.2126: P 1:44(43) ack 43 win 64743
16:38:19.128203
IP 10.2.0.45.445 > 10.2.11.22.2126: P 1:44(43) ack 43 win 64743
16:38:19.128483
IP 10.2.11.22.2126 > 10.2.0.45.445: P 43:82(39) ack 44 win 64853
16:38:19.128498
IP 10.2.11.22.2126 > 10.2.0.45.445: P 43:82(39) ack 44 win 64853
16:38:19.128862
IP 10.2.0.45.445 > 10.2.11.22.2126: P 44:83(39) ack 82 win 64704
16:38:19.128877
IP 10.2.0.45.445 > 10.2.11.22.2126: P 44:83(39) ack 82 win 64704
16:38:19.129449
IP 10.2.11.22.2126 >10.2.0.45.445: F 82:82(0) ack 83 win 64814
16:38:19.129462
IP 10.2.11.22.2126 > 10.2.0.45.445: F 82:82(0) ack 83 win 64814
16:38:19.129572
IP 10.2.0.45.445 > 10.2.11.22.2126: F 83:83(0) ack 83 win 64704
16:38:19.129584
IP 10.2.0.45.445 > 10.2.11.22.2126: F 83:83(0) ack 83 win 64704
16:38:19.129729
IP 10.2.11.22.2126 > 10.2.0.45.445: . ack 84 win 64814
16:38:19.129740
IP 10.2.11.22.2126 > 10.2.0.45.445: . ack 84 win 64814
16:38:19.129810
IP 10.2.11.22.2135 > 10.2.0.45.445: P 3783259994:3783260037(43) ack 3554843570 win 64690
16:38:19.129822
IP 10.2.11.22.2135 > 10.2.0.45.445: P 0:43(43) ack 1 win 64690
16:38:19.130163
IP 10.2.0.45.445 > 10.2.11.22.2135: P 1:44(43) ack 43 win 64102
16:38:19.130177
IP 10.2.0.45.445 > 10.2.11.22.2135: P 1:44(43) ack 43 win 64102
16:38:19.130615
IP 10.2.11.22.2135 > 10.2.0.45.445: P 43:82(39) ack 44 win 64647
16:38:19.130642
IP 10.2.11.22.2135 > 10.2.0.45.445: P 43:82(39) ack 44 win 64647
16:38:19.130995
IP 10.2.0.45.445 > 10.2.11.22.2135: P 44:83(39) ack 82 win 65535
16:38:19.131028
IP 10.2.0.45.445 > 10.2.11.22.2135: P 44:83(39) ack 82 win 65535
16:38:19.131545
IP 10.2.11.22.2135 > 10.2.0.45.445: P 82:125(43) ack 83 win 64608
16:38:19.131581
IP 10.2.11.22.2135 > 10.2.0.45.445: P 82:125(43) ack 83 win 64608
16:38:19.132008
IP 10.2.0.45.445 > 10.2.11.22.2135: P 83:126(43) ack 125 win 65492
16:38:19.132043
IP 10.2.0.45.445 > 10.2.11.22.2135: P 83:126(43) ack 125 win 65492
16:38:19.132338
IP 10.2.11.22.2135 > 10.2.0.45.445: P 125:164(39) ack 126 win 64565
16:38:19.132371
IP 10.2.11.22.2135 > 10.2.0.45.445: P 125:164(39) ack 126 win 64565
16:38:19.132757
IP 10.2.0.45.445 > 10.2.11.22.2135: P 126:165(39) ack 164 win 65453
16:38:19.132790
IP 10.2.0.45.445 > 10.2.11.22.2135: P 126:165(39) ack 164 win 65453
16:38:19.133261
IP 10.2.11.22.2135 > 10.2.0.45.445: F 164:164(0) ack 165 win 64526
16:38:19.133349
IP 10.2.11.22.2135 > 10.2.0.45.445: F 164:164(0) ack 165 win 64526
16:38:19.133494
IP 10.2.0.45.445 > 10.2.11.22.2135: F 165:165(0) ack 165 win 65453
16:38:19.133521
IP 10.2.0.45.445 > 10.2.11.22.2135: F 165:165(0) ack 165 win 65453
16:38:19.133599
IP 10.2.11.22.2135 > 10.2.0.45.445: . ack 166 win 64526
16:38:19.133616
IP 10.2.11.22.2135 > 10.2.0.45.445: . ack 166 win 64526
16:38:19.133666
IP 10.2.11.22.2138 > 10.2.0.8.445: P 3756412108:3756412151(43) ack 4083233086 win 65245
16:38:19.133679
IP 10.2.11.22.2138 > 10.2.0.8.445: P 0:43(43) ack 1 win 65245
16:38:19.134564
IP 10.2.0.8.445 > 10.2.11.22.2138: P 1:44(43) ack 43 win 65332
16:38:19.134597
IP 10.2.0.8.445 > 10.2.11.22.2138: P 1:44(43) ack 43 win 65332
16:38:19.134912
IP 10.2.11.22.2138 > 10.2.0.8.445: P 43:82(39) ack 44 win 65202
16:38:19.134933
IP 10.2.11.22.2138 > 10.2.0.8.445: P 43:82(39) ack 44 win 65202
16:38:19.135110
IP 10.2.0.8.445 > 10.2.11.22.2138: P 44:83(39) ack 82 win 65293
16:38:19.135126
IP 10.2.0.8.445 > 10.2.11.22.2138: P 44:83(39) ack 82 win 65293
16:38:19.135390
IP 10.2.11.22.2138 > 10.2.0.8.445: P 82:125(43) ack 83 win 65163
16:38:19.135407
IP 10.2.11.22.2138 > 10.2.0.8.445: P 82:125(43) ack 83 win 65163
16:38:19.136261
IP 10.2.0.8.445 > 10.2.11.22.2138: P 83:126(43) ack 125 win 65250
16:38:19.136287
IP 10.2.0.8.445 > 10.2.11.22.2138: P 83:126(43) ack 125 win 65250
16:38:19.136635
IP 10.2.11.22.2138 > 10.2.0.8.445: P 125:164(39) ack 126 win 65120
16:38:19.136656
IP 10.2.11.22.2138 > 10.2.0.8.445: P 125:164(39) ack 126 win 65120
16:38:19.136834
IP 10.2.0.8.445 > 10.2.11.22.2138: P 126:165(39) ack 164 win 65211
16:38:19.136850
IP 10.2.0.8.445 > 10.2.11.22.2138: P 126:165(39) ack 164 win 65211
16:38:19.137096
IP 10.2.11.22.2138 > 10.2.0.8.445: F 164:164(0) ack 165 win 65081
16:38:19.137124
IP 10.2.11.22.2138 > 10.2.0.8.445: F 164:164(0) ack 165 win 65081
16:38:19.137276
IP 10.2.0.8.445 > 10.2.11.22.2138: F 165:165(0) ack 165 win 65211
16:38:19.137295
IP 10.2.0.8.445 > 10.2.11.22.2138: F 165:165(0) ack 165 win 65211
16:38:19.137466
IP 10.2.11.22.2138 > 10.2.0.8.445: . ack 166 win 65081
16:38:19.137483
IP 10.2.11.22.2138 > 10.2.0.8.445: . ack 166 win 65081
16:38:20.117775
IP 10.2.0.45.445 > 10.2.11.5.1186: . 2925775754:2925775755(1) ack 3136667137 win 64767
16:38:20.117810
IP 10.2.0.45.445 > 10.2.11.5.1186: . 0:1(1) ack 1 win 64767
16:38:20.117949
IP 10.2.11.5.1186 > 10.2.0.45.445: . ack 1 win 64871
16:38:20.117971
IP 10.2.11.5.1186 > 10.2.0.45.445: . ack 1 win 64871
16:38:22.891600
IP 10.2.6.2.1815 > 10.2.0.45.445: P 2480474758:2480474972(214) ack 3849397635 win 16632
16:38:22.891620
IP 10.2.6.2.1815 > 10.2.0.45.445: P 0:214(214) ack 1 win 16632
16:38:22.892304
IP 10.2.0.45.445 > 10.2.6.2.1815: P 1:40(39) ack 214 win 65535
16:38:22.892325
IP 10.2.0.45.445 > 10.2.6.2.1815: P 1:40(39) ack 214 win 65535
16:38:22.901608
IP 10.2.5.16.3302 > 10.2.5.91.445: S 3138089472:3138089472(0) win 65535 <mss 1460,nop,nop,sackOK>
16:38:22.903183
IP 10.2.5.16.3303 > 10.2.5.91.139: S 3748550649:3748550649(0) win 65535 <mss 1460,nop,nop,sackOK>
16:38:23.050214
IP 10.2.6.2.1815 > 10.2.0.45.445: . ack 40 win 16593
16:38:23.050228
IP 10.2.6.2.1815 > 10.2.0.45.445: . ack 40 win 16593
16:38:23.811367
IP 10.2.6.2.1238 > 10.10.0.36.445: P 1966377758:1966377811(53) ack 4153973184 win 16354
16:38:23.856917
IP 10.10.0.36.445 > 10.2.6.2.1238: P 1:54(53) ack 53 win 64316






Agora segue abaixo o log tbm pelo tcpdump dá maquina e002-1114 com o ip de uma subrede que entra com um tempo normal no dominio:



16:51:14.207039
arp who-has e002-1114.global.adm tell e002-1114.global.adm
16:51:15.205354
arp who-has e002-1114.global.adm tell e002-1114.global.adm
16:51:16.205399
arp who-has e002-1114.global.adm tell e002-1114.global.adm
16:51:37.449159
IP e002-1114.global.adm.netbios-ns > 10.2.11.63.netbios-ns: NBT UDP PACKET(137): REGISTRATION; REQUEST; BROADCAST
16:51:38.190860
IP e002-1114.global.adm.netbios-ns > 10.2.11.63.netbios-ns: NBT UDP PACKET(137): REGISTRATION; REQUEST; BROADCAST
16:51:38.940905
IP e002-1114.global.adm.netbios-ns > 10.2.11.63.netbios-ns: NBT UDP PACKET(137): REGISTRATION; REQUEST; BROADCAST
16:51:39.690950
IP e002-1114.global.adm.netbios-ns > 10.2.11.63.netbios-ns: NBT UDP PACKET(137): REGISTRATION; REQUEST; BROADCAST
16:51:40.441182
IP e002-1114.global.adm.netbios-ns > 10.2.11.63.netbios-ns: NBT UDP PACKET(137): REGISTRATION; REQUEST; BROADCAST
16:51:41.191011
IP e002-1114.global.adm.netbios-ns > 10.2.11.63.netbios-ns: NBT UDP PACKET(137): REGISTRATION; REQUEST; BROADCAST
16:51:41.941074
IP e002-1114.global.adm.netbios-ns > 10.2.11.63.netbios-ns: NBT UDP PACKET(137): REGISTRATION; REQUEST; BROADCAST
16:51:42.691070
IP e002-1114.global.adm.netbios-ns > 10.2.11.63.netbios-ns: NBT UDP PACKET(137): REGISTRATION; REQUEST; BROADCAST
16:51:43.941218
arp who-has 10.2.11.1 tell e002-1114.global.adm
16:51:43.941372
IP e002-1114.global.adm.blackjack > s002-0045.global.adm.domain: 39939+[|domain]
16:51:43.941440
IP e002-1114.global.adm.blackjack > s002-0045.global.adm.domain: 39939+[|domain]
16:51:43.967556
IP e002-1114.global.adm.1028 > s002-0045.global.adm.ldap: UDP, length: 205
16:51:43.967597
IP e002-1114.global.adm.1028 > s002-0045.global.adm.ldap: UDP, length: 205
16:51:44.069724
IP e002-1114.global.adm.1029 > s002-0045.global.adm.kerberos-sec: v5
16:51:44.069773
IP e002-1114.global.adm.1029 > s002-0045.global.adm.kerberos-sec: v5
16:51:44.155338
IP e002-1114.global.adm.iad1 > s002-0045.global.adm.kerberos-sec:
16:51:44.155388
IP e002-1114.global.adm.iad1 > s002-0045.global.adm.kerberos-sec:
16:51:44.155530
IP e002-1114.global.adm.blackjack > s002-0045.global.adm.domain: 52161+ A? s002-0045.global.adm. (38)
16:51:44.155549
IP e002-1114.global.adm.blackjack > s002-0045.global.adm.domain: 52161+ A? s002-0045.global.adm. (38)
16:51:44.169657
IP e002-1114.global.adm.iad2 > s002-0045.global.adm.loc-srv: S 1427140738:1427140738(0) win 65535 <mss 1460,nop,nop,sackOK>
16:51:44.169703
IP e002-1114.global.adm.iad2 > s002-0045.global.adm.loc-srv: S 1427140738:1427140738(0) win 65535 <mss 1460,nop,nop,sackOK>
16:51:44.169978
IP e002-1114.global.adm.iad2 > s002-0045.global.adm.loc-srv: . ack 1796310009 win 65535
16:51:44.169989
IP e002-1114.global.adm.iad2 > s002-0045.global.adm.loc-srv: . ack 1 win 65535
16:51:44.170132
IP e002-1114.global.adm.iad2 > s002-0045.global.adm.loc-srv: P 0:72(72) ack 1 win 65535
16:51:44.170149
IP e002-1114.global.adm.iad2 > s002-0045.global.adm.loc-srv: P 0:72(72) ack 1 win 65535
16:51:44.171129
IP e002-1114.global.adm.iad2 > s002-0045.global.adm.loc-srv: P 72:228(156) ack 61 win 65475
16:51:44.171139
IP e002-1114.global.adm.iad2 > s002-0045.global.adm.loc-srv: P 72:228(156) ack 61 win 65475
16:51:44.172695
IP e002-1114.global.adm.iad3 > s002-0045.global.adm.1026: S 4158108979:4158108979(0) win 65535 <mss 1460,nop,nop,sackOK>
16:51:44.172740
IP e002-1114.global.adm.iad3 > s002-0045.global.adm.1026: S 4158108979:4158108979(0) win 65535 <mss 1460,nop,nop,sackOK>
16:51:44.173133
IP e002-1114.global.adm.iad3 > s002-0045.global.adm.1026: . ack 4186408263 win 65535
16:51:44.173144
IP e002-1114.global.adm.iad3 > s002-0045.global.adm.1026: . ack 1 win 65535
16:51:44.173519
IP e002-1114.global.adm.iad3 > s002-0045.global.adm.1026: P 0:72(72) ack 1 win 65535
16:51:44.173535
IP e002-1114.global.adm.iad3 > s002-0045.global.adm.1026: P 0:72(72) ack 1 win 65535
16:51:44.174104
IP e002-1114.global.adm.iad3 > s002-0045.global.adm.1026: P 72:200(128) ack 61 win 65475
16:51:44.174114
IP e002-1114.global.adm.iad3 > s002-0045.global.adm.1026: P 72:200(128) ack 61 win 65475
16:51:44.174811
IP e002-1114.global.adm.iad3 > s002-0045.global.adm.1026: P 200:368(168) ack 97 win 65439
16:51:44.174822
IP e002-1114.global.adm.iad3 > s002-0045.global.adm.1026: P 200:368(168) ack 97 win 65439
16:51:44.176750
IP e002-1114.global.adm.1033 > s002-0045.global.adm.1026: S 2963084467:2963084467(0) win 65535 <mss 1460,nop,nop,sackOK>
16:51:44.176816
IP e002-1114.global.adm.1033 > s002-0045.global.adm.1026: S 2963084467:2963084467(0) win 65535 <mss 1460,nop,nop,sackOK>
16:51:44.177078
IP e002-1114.global.adm.1033 > s002-0045.global.adm.1026: . ack 2415639954 win 65535
16:51:44.177101
IP e002-1114.global.adm.1033 > s002-0045.global.adm.1026: . ack 1 win 65535
16:51:44.177233
IP e002-1114.global.adm.1033 > s002-0045.global.adm.1026: P 0:128(128) ack 1 win 65535
16:51:44.177253
IP e002-1114.global.adm.1033 > s002-0045.global.adm.1026: P 0:128(128) ack 1 win 65535
16:51:44.178246
IP e002-1114.global.adm.1033 > s002-0045.global.adm.1026: P 128:816(688) ack 81 win 65455
16:51:44.178269
IP e002-1114.global.adm.1033 > s002-0045.global.adm.1026: P 128:816(688) ack 81 win 65455
16:51:44.378615
IP e002-1114.global.adm.iad2 > s002-0045.global.adm.loc-srv: . ack 213 win 65323
16:51:44.378645
IP e002-1114.global.adm.iad2 > s002-0045.global.adm.loc-srv: . ack 213 win 65323
16:51:44.378619
IP e002-1114.global.adm.iad3 > s002-0045.global.adm.1026: . ack 141 win 65395
16:51:44.378652
IP e002-1114.global.adm.iad3 > s002-0045.global.adm.1026: . ack 141 win 65395
16:51:44.378638
IP e002-1114.global.adm.1033 > s002-0045.global.adm.1026: . ack 1505 win 65535
16:51:44.378668
IP e002-1114.global.adm.1033 > s002-0045.global.adm.1026: . ack 1505 win 65535
16:51:44.941202
IP e002-1114.global.adm.1026 > s002-0045.global.adm.domain: 7191+[|domain]
16:51:44.941319
IP e002-1114.global.adm.1026 > s002-0045.global.adm.domain: 7191+[|domain]
16:51:44.946695
IP e002-1114.global.adm > IGMP.MCAST.NET: igmp v3 report, 1 group record(s)
16:51:45.002537
IP e002-1114.global.adm.1034 > s002-0045.global.adm.ldap: UDP, length: 162
16:51:45.002617
IP e002-1114.global.adm.1034 > s002-0045.global.adm.ldap: UDP, length: 162
16:51:45.326045
IP e002-1114.global.adm.1038 > s002-0045.global.adm.16111: S 3774058328:3774058328(0) win 65535 <mss 1460,nop,nop,sackOK>
16:51:45.544751
IP e002-1114.global.adm > s002-0045.global.adm: icmp 40: echo request seq 256
16:51:45.544798
IP e002-1114.global.adm > s002-0045.global.adm: icmp 40: echo request seq 256
16:51:45.545683
IP e002-1114.global.adm.1036 > s002-0045.global.adm.microsoft-ds: S 1885379362:1885379362(0) win 65535 <mss 1460,nop,nop,sackOK>
16:51:45.545720
IP e002-1114.global.adm.1036 > s002-0045.global.adm.microsoft-ds: S 1885379362:1885379362(0) win 65535 <mss 1460,nop,nop,sackOK>
16:51:45.545926
IP e002-1114.global.adm > s002-0045.global.adm: icmp 40: echo request seq 512
16:51:45.545956
IP e002-1114.global.adm > s002-0045.global.adm: icmp 40: echo request seq 512
16:51:45.545991
IP e002-1114.global.adm.1036 > s002-0045.global.adm.microsoft-ds: . ack 38000927 win 65535
16:51:45.546005
IP e002-1114.global.adm.1036 > s002-0045.global.adm.microsoft-ds: . ack 1 win 65535
16:51:45.546189
IP e002-1114.global.adm.1036 > s002-0045.global.adm.microsoft-ds: P 0:137(137) ack 1 win 65535
16:51:45.546209
IP e002-1114.global.adm.1036 > s002-0045.global.adm.microsoft-ds: P 0:137(137) ack 1 win 65535
16:51:45.548204
IP e002-1114.global.adm.1039 > s002-0045.global.adm.kerberos-sec: v5
16:51:45.548240
IP e002-1114.global.adm.1039 > s002-0045.global.adm.kerberos-sec: v5
16:51:45.552298
IP e002-1114.global.adm.1040 > s002-0045.global.adm.kerberos-sec:
16:51:45.552359
IP e002-1114.global.adm.1040 > s002-0045.global.adm.kerberos-sec:
16:51:45.556366
IP e002-1114.global.adm.1041 > s002-0045.global.adm.kerberos-sec:
16:51:45.556431
IP e002-1114.global.adm.1041 > s002-0045.global.adm.kerberos-sec:
16:51:45.559488
IP e002-1114.global.adm.1036 > s002-0045.global.adm.microsoft-ds: . 137:1597(1460) ack 183 win 65353
16:51:45.559499
IP e002-1114.global.adm.1036 > s002-0045.global.adm.microsoft-ds: . 137:1597(1460) ack 183 win 65353
16:51:45.559585
IP e002-1114.global.adm.1036 > s002-0045.global.adm.microsoft-ds: P 1597:2759(1162) ack 183 win 65353
16:51:45.559603
IP e002-1114.global.adm.1036 > s002-0045.global.adm.microsoft-ds: P 1597:2759(1162) ack 183 win 65353
16:51:45.561820
IP e002-1114.global.adm.1036 > s002-0045.global.adm.microsoft-ds: P 2759:2869(110) ack 520 win 65016
16:51:45.561830
IP e002-1114.global.adm.1036 > s002-0045.global.adm.microsoft-ds: P 2759:2869(110) ack 520 win 65016
16:51:45.562683
IP e002-1114.global.adm.1036 > s002-0045.global.adm.microsoft-ds: P 2869:2945(76) ack 580 win 64956
16:51:45.562691
IP e002-1114.global.adm.1036 > s002-0045.global.adm.microsoft-ds: P 2869:2945(76) ack 580 win 64956
16:51:45.691178
IP e002-1114.global.adm.1036 > s002-0045.global.adm.microsoft-ds: . ack 1154 win 64382
16:51:45.691192
IP e002-1114.global.adm.1036 > s002-0045.global.adm.microsoft-ds: . ack 1154 win 64382
16:51:45.706818
IP e002-1114.global.adm > IGMP.MCAST.NET: igmp v3 report, 1 group record(s)
16:51:45.870995
IP e002-1114.global.adm > s002-0045.global.adm: icmp 8: echo request seq 768
16:51:45.871043
IP e002-1114.global.adm > s002-0045.global.adm: icmp 8: echo request seq 768
16:51:46.166813
IP e002-1114.global.adm.5353 > 224.0.0.251.5353: 0 [1n] ANY (Cache flush)? E002-0106.local. (49)
16:51:46.166922
IP e002-1114.global.adm.1035 > s002-0045.global.adm.domain: 41855+[|domain]
16:51:46.166965
IP e002-1114.global.adm.1035 > s002-0045.global.adm.domain: 41855+[|domain]
16:51:46.269600
IP e002-1114.global.adm.5353 > 224.0.0.251.5353: 0*- [0q] 1/0/0 (Cache flush) PTR[|domain]
16:51:46.410408
IP e002-1114.global.adm.5353 > 224.0.0.251.5353: 0 [1n] ANY? E002-0106.local. (49)
16:51:46.663166
IP e002-1114.global.adm.5353 > 224.0.0.251.5353: 0 [1n] ANY? E002-0106.local. (49)
16:51:46.910061
IP e002-1114.global.adm.5353 > 224.0.0.251.5353: 0*- [0q] 1/0/0 (Cache flush) A e002-1114.global.adm (43)
16:51:47.269655
IP e002-1114.global.adm.5353 > 224.0.0.251.5353: 0*- [0q] 1/0/0 (Cache flush) PTR[|domain]
16:51:47.563500
IP e002-1114.global.adm.netbios-ns > 10.2.11.63.netbios-ns: NBT UDP PACKET(137): REGISTRATION; REQUEST; BROADCAST
16:51:47.910110
IP e002-1114.global.adm.5353 > 224.0.0.251.5353: 0*- [0q] 1/0/0 (Cache flush) A e002-1114.global.adm (43)
16:51:48.300714
IP e002-1114.global.adm.netbios-ns > 10.2.11.63.netbios-ns: NBT UDP PACKET(137): REGISTRATION; REQUEST; BROADCAST
16:51:48.316283
IP e002-1114.global.adm.1038 > s002-0045.global.adm.16111: S 3774058328:3774058328(0) win 65535 <mss 1460,nop,nop,sackOK>
16:51:48.937347 arp reply e002-1114.global.adm is-at 00:1b:b9:e4:c8:8a
16:51:49.050739
IP e002-1114.global.adm.netbios-ns > 10.2.11.63.netbios-ns: NBT UDP PACKET(137): REGISTRATION; REQUEST; BROADCAST
16:51:49.175836
IP e002-1114.global.adm.1035 > s002-0045.global.adm.domain: 41854+ PTR? 14.11.2.10.in-addr.arpa. (41)
16:51:49.175870
IP e002-1114.global.adm.1035 > s002-0045.global.adm.domain: 41854+ PTR? 14.11.2.10.in-addr.arpa. (41)
16:51:49.285155
IP e002-1114.global.adm.5353 > 224.0.0.251.5353: 0*- [0q] 2/0/0 (Cache flush) A e002-1114.global.adm, (80)
16:51:49.800797
IP e002-1114.global.adm.netbios-ns > 10.2.11.63.netbios-ns: NBT UDP PACKET(137): REGISTRATION; REQUEST; BROADCAST
16:51:50.553141
IP e002-1114.global.adm.netbios-dgm > 10.2.11.63.netbios-dgm: NBT UDP PACKET(138)
16:51:51.760825
IP e002-1114.global.adm.ntp > s002-0045.global.adm.ntp: [len=68]NTPv3 sym_act, strat 0, poll 10, prec -6
16:51:51.760873
IP e002-1114.global.adm.ntp > s002-0045.global.adm.ntp: [len=68]NTPv3 sym_act, strat 0, poll 10, prec -6
16:51:51.769929
IP e002-1114.global.adm.ntp > s002-0045.global.adm.ntp: [len=68]NTPv3 sym_act, strat 0, poll 10, prec -6
16:51:51.769951
IP e002-1114.global.adm.ntp > s002-0045.global.adm.ntp: [len=68]NTPv3 sym_act, strat 0, poll 10, prec -6
16:51:53.295082
IP e002-1114.global.adm.5353 > 224.0.0.251.5353: 0*- [0q] 2/0/0 (Cache flush) A e002-1114.global.adm, (80)
16:51:53.944912
IP e002-1114.global.adm.blackjack > s002-0045.global.adm.domain: 32857+ A? g.ceipmsn.com. (31)
16:51:53.944937
IP e002-1114.global.adm.blackjack > s002-0045.global.adm.domain: 32857+ A? g.ceipmsn.com. (31)
16:51:53.973268
IP e002-1114.global.adm.1042 > msnbot-65-55-4-185.search.msn.com.http: S 4231026364:4231026364(0) win 65535 <mss 1460,nop,nop,sackOK>
16:51:53.973482
IP e002-1114.global.adm.1042 > msnbot-65-55-4-185.search.msn.com.http: . ack 3305124925 win 65535
16:51:53.973772
IP e002-1114.global.adm.1042 > msnbot-65-55-4-185.search.msn.com.http: P 0:213(213) ack 1 win 65535
16:51:54.332239
IP e002-1114.global.adm.1038 > s002-0045.global.adm.16111: S 3774058328:3774058328(0) win 65535 <mss 1460,nop,nop,sackOK>
16:51:54.972940
IP e002-1114.global.adm.iad2 > s002-0045.global.adm.loc-srv: F 228:228(0) ack 213 win 65323
16:51:54.972957
IP e002-1114.global.adm.iad2 > s002-0045.global.adm.loc-srv: F 228:228(0) ack 213 win 65323
16:51:54.973005
IP e002-1114.global.adm.1033 > s002-0045.global.adm.1026: F 816:816(0) ack 1505 win 65535
16:51:54.973093
IP e002-1114.global.adm.1033 > s002-0045.global.adm.1026: F 816:816(0) ack 1505 win 65535
16:51:54.973030
IP e002-1114.global.adm.iad3 > s002-0045.global.adm.1026: F 368:368(0) ack 141 win 65395
16:51:54.973116
IP e002-1114.global.adm.iad3 > s002-0045.global.adm.1026: F 368:368(0) ack 141 win 65395
16:51:54.973255
IP e002-1114.global.adm.iad2 > s002-0045.global.adm.loc-srv: . ack 214 win 65323
16:51:54.973284
IP e002-1114.global.adm.iad2 > s002-0045.global.adm.loc-srv: . ack 214 win 65323
16:51:54.973384
IP e002-1114.global.adm.1033 > s002-0045.global.adm.1026: . ack 1506 win 65535
16:51:54.973401
IP e002-1114.global.adm.1033 > s002-0045.global.adm.1026: . ack 1506 win 65535
16:51:54.973441
IP e002-1114.global.adm.iad3 > s002-0045.global.adm.1026: . ack 142 win 65395
16:51:54.973452
IP e002-1114.global.adm.iad3 > s002-0045.global.adm.1026: . ack 142 win 65395
16:51:54.975417
IP e002-1114.global.adm.1043 > s002-0045.global.adm.loc-srv: S 1363409042:1363409042(0) win 65535 <mss 1460,nop,nop,sackOK>
16:51:54.975469
IP e002-1114.global.adm.1043 > s002-0045.global.adm.loc-srv: S 1363409042:1363409042(0) win 65535 <mss 1460,nop,nop,sackOK>
16:51:54.975724
IP e002-1114.global.adm.1043 > s002-0045.global.adm.loc-srv: . ack 1824961001 win 65535
16:51:54.975737
IP e002-1114.global.adm.1043 > s002-0045.global.adm.loc-srv: . ack 1 win 65535
16:51:54.975945
IP e002-1114.global.adm.1043 > s002-0045.global.adm.loc-srv: P 0:72(72) ack 1 win 65535
16:51:54.975959
IP e002-1114.global.adm.1043 > s002-0045.global.adm.loc-srv: P 0:72(72) ack 1 win 65535
16:51:54.976603
IP e002-1114.global.adm.1043 > s002-0045.global.adm.loc-srv: P 72:228(156) ack 61 win 65475
16:51:54.976614
IP e002-1114.global.adm.1043 > s002-0045.global.adm.loc-srv: P 72:228(156) ack 61 win 65475
16:51:54.977962
IP e002-1114.global.adm.1044 > s002-0045.global.adm.1026: S 1530190115:1530190115(0) win 65535 <mss 1460,nop,nop,sackOK>
16:51:54.977999
IP e002-1114.global.adm.1044 > s002-0045.global.adm.1026: S 1530190115:1530190115(0) win 65535 <mss 1460,nop,nop,sackOK>
16:51:54.978241
IP e002-1114.global.adm.1044 > s002-0045.global.adm.1026: . ack 3961069296 win 65535
16:51:54.978252
IP e002-1114.global.adm.1044 > s002-0045.global.adm.1026: . ack 1 win 65535
16:51:54.979568
IP e002-1114.global.adm.1045 > s002-0045.global.adm.kerberos-sec:
16:51:54.979612
IP e002-1114.global.adm.1045 > s002-0045.global.adm.kerberos-sec:
16:51:54.983129
IP e002-1114.global.adm.1044 > s002-0045.global.adm.1026: . 0:1460(1460) ack 1 win 65535
16:51:54.983142
IP e002-1114.global.adm.1044 > s002-0045.global.adm.1026: . 0:1460(1460) ack 1 win 65535
16:51:54.983218
IP e002-1114.global.adm.1044 > s002-0045.global.adm.1026: P 1460:2519(1059) ack 1 win 65535
16:51:54.983232
IP e002-1114.global.adm.1044 > s002-0045.global.adm.1026: P 1460:2519(1059) ack 1 win 65535
16:51:54.985648
IP e002-1114.global.adm.1044 > s002-0045.global.adm.1026: P 2519:2696(177) ack 213 win 65323
16:51:54.985658
IP e002-1114.global.adm.1044 > s002-0045.global.adm.1026: P 2519:2696(177) ack 213 win 65323
16:51:55.013854
IP e002-1114.global.adm.1044 > s002-0045.global.adm.1026: P 2696:2885(189) ack 286 win 65250
16:51:55.013886
IP e002-1114.global.adm.1044 > s002-0045.global.adm.1026: P 2696:2885(189) ack 286 win 65250
16:51:55.015403
IP e002-1114.global.adm.1044 > s002-0045.global.adm.1026: P 2885:3074(189) ack 427 win 65109
16:51:55.015416
IP e002-1114.global.adm.1044 > s002-0045.global.adm.1026: P 2885:3074(189) ack 427 win 65109
16:51:55.016768
IP e002-1114.global.adm.1044 > s002-0045.global.adm.1026: P 3074:3263(189) ack 776 win 64760
16:51:55.016778
IP e002-1114.global.adm.1044 > s002-0045.global.adm.1026: P 3074:3263(189) ack 776 win 64760
16:51:55.017972
IP e002-1114.global.adm.1044 > s002-0045.global.adm.1026: P 3263:3372(109) ack 1029 win 64507
16:51:55.017983
IP e002-1114.global.adm.1044 > s002-0045.global.adm.1026: P 3263:3372(109) ack 1029 win 64507
16:51:55.097869
IP e002-1114.global.adm.1043 > s002-0045.global.adm.loc-srv: . ack 213 win 65323
16:51:55.097884
IP e002-1114.global.adm.1043 > s002-0045.global.adm.loc-srv: . ack 213 win 65323
16:51:55.138348
IP e002-1114.global.adm.1046 > s002-0045.global.adm.kerberos-sec:
16:51:55.138400
IP e002-1114.global.adm.1046 > s002-0045.global.adm.kerberos-sec:
16:51:55.149084
IP e002-1114.global.adm.1047 > s002-0045.global.adm.1026: S 3698401481:3698401481(0) win 65535 <mss 1460,nop,nop,sackOK>
16:51:55.149130
IP e002-1114.global.adm.1047 > s002-0045.global.adm.1026: S 3698401481:3698401481(0) win 65535 <mss 1460,nop,nop,sackOK>
16:51:55.149394
IP e002-1114.global.adm.1047 > s002-0045.global.adm.1026: . ack 2861244938 win 65535
16:51:55.149405
IP e002-1114.global.adm.1047 > s002-0045.global.adm.1026: . ack 1 win 65535
16:51:55.149643
IP e002-1114.global.adm.1047 > s002-0045.global.adm.1026: P 0:128(128) ack 1 win 65535
16:51:55.149657
IP e002-1114.global.adm.1047 > s002-0045.global.adm.1026: P 0:128(128) ack 1 win 65535
16:51:55.150892
IP e002-1114.global.adm.1047 > s002-0045.global.adm.1026: P 128:512(384) ack 81 win 65455
16:51:55.150915
IP e002-1114.global.adm.1047 > s002-0045.global.adm.1026: P 128:512(384) ack 81 win 65455
16:51:55.166127
IP e002-1114.global.adm.1049 > s002-0045.global.adm.ldap: S 3245042784:3245042784(0) win 65535 <mss 1460,nop,nop,sackOK>
16:51:55.166196
IP e002-1114.global.adm.1049 > s002-0045.global.adm.ldap: S 3245042784:3245042784(0) win 65535 <mss 1460,nop,nop,sackOK>
16:51:55.166443
IP e002-1114.global.adm.1049 > s002-0045.global.adm.ldap: . ack 3780995150 win 65535
16:51:55.166454
IP e002-1114.global.adm.1049 > s002-0045.global.adm.ldap: . ack 1 win 65535
16:51:55.173509
IP e002-1114.global.adm.1049 > s002-0045.global.adm.ldap: P 0:350(350) ack 1 win 65535
16:51:55.173521
IP e002-1114.global.adm.1049 > s002-0045.global.adm.ldap: P 0:350(350) ack 1 win 65535
16:51:55.175315
IP e002-1114.global.adm.1049 > s002-0045.global.adm.ldap: . ack 1990 win 65535
16:51:55.175325
IP e002-1114.global.adm.1049 > s002-0045.global.adm.ldap: . ack 1990 win 65535
16:51:55.178152
IP e002-1114.global.adm.1050 > s002-0045.global.adm.kerberos-sec:
16:51:55.178195
IP e002-1114.global.adm.1050 > s002-0045.global.adm.kerberos-sec:
16:51:55.11626
IP e002-1114.global.adm.1049 > s002-0045.global.adm.ldap: P 350:1648(1298) ack 1990 win 65535
16:51:55.181638
IP e002-1114.global.adm.1049 > s002-0045.global.adm.ldap: P 350:1648(1298) ack 1990 win 65535
16:51:55.207249
IP e002-1114.global.adm.1044 > s002-0045.global.adm.1026: . ack 1138 win 64398
16:51:55.207263
IP e002-1114.global.adm.1044 > s002-0045.global.adm.1026: . ack 1138 win 64398
16:51:55.235378
IP e002-1114.global.adm.1049 > s002-0045.global.adm.ldap: P 1648:2200(552) ack 2178 win 65347
16:51:55.235392
IP e002-1114.global.adm.1049 > s002-0045.global.adm.ldap: P 1648:2200(552) ack 2178 win 65347
16:51:55.245701
IP e002-1114.global.adm.1049 > s002-0045.global.adm.ldap: P 2200:3024(824) ack 3466 win 65535
16:51:55.245720
IP e002-1114.global.adm.1049 > s002-0045.global.adm.ldap: P 2200:3024(824) ack 3466 win 65535
16:51:55.248906
IP e002-1114.global.adm.1049 > s002-0045.global.adm.ldap: . ack 6386 win 65535
16:51:55.248916
IP e002-1114.global.adm.1049 > s002-0045.global.adm.ldap: . ack 6386 win 65535
16:51:55.316621
IP e002-1114.global.adm.1047 > s002-0045.global.adm.1026: . ack 193 win 65343
16:51:55.316634
IP e002-1114.global.adm.1047 > s002-0045.global.adm.1026: . ack 193 win 65343
16:51:55.413184
IP e002-1114.global.adm.1042 > msnbot-65-55-4-185.search.msn.com.http: . ack 235 win 65302
16:51:55.413289
IP e002-1114.global.adm.1042 > msnbot-65-55-4-185.search.msn.com.http: F 213:213(0) ack 235 win 65302
16:51:55.417482
IP e002-1114.global.adm.blackjack > s002-0045.global.adm.domain: 32910+ A? g.msn.com. (27)
16:51:55.417515
IP e002-1114.global.adm.blackjack > s002-0045.global.adm.domain: 32910+ A? g.msn.com. (27)
16:51:55.418649
IP e002-1114.global.adm.1051 > 207.46.216.54.http: S 577863513:577863513(0) win 65535 <mss 1460,nop,nop,sackOK>
16:51:55.418850
IP e002-1114.global.adm.1051 > 207.46.216.54.http: . ack 3309082121 win 65535
16:51:55.419120
IP e002-1114.global.adm.1051 > 207.46.216.54.http: P 0:135(135) ack 1 win 65535
16:51:55.889930
IP e002-1114.global.adm.1051 > 207.46.216.54.http: . ack 463 win 65074
16:51:55.890075
IP e002-1114.global.adm.1051 > 207.46.216.54.http: F 135:135(0) ack 463 win 65074
16:51:55.891025
IP e002-1114.global.adm.blackjack > s002-0045.global.adm.domain: 52265+ A? searchclient.live.net. (39)
16:51:55.891055
IP e002-1114.global.adm.blackjack > s002-0045.global.adm.domain: 52265+ A? searchclient.live.net. (39)
16:51:55.946658
IP e002-1114.global.adm.1053 > cdn-68-142-101-254-mia1.llnw.net.http: S 3375612026:3375612026(0) win 65535 <mss 1460,nop,nop,sackOK>
16:51:55.946852
IP e002-1114.global.adm.1053 > cdn-68-142-101-254-mia1.llnw.net.http: . ack 3297697546 win 65535
16:51:55.947184
IP e002-1114.global.adm.1053 > cdn-68-142-101-254-mia1.llnw.net.http: P 0:158(158) ack 1 win 65535
16:51:56.544209
IP e002-1114.global.adm.1036 > s002-0045.global.adm.microsoft-ds: P 2945:3043(98) ack 1154 win 64382
16:51:56.544222
IP e002-1114.global.adm.1036 > s002-0045.global.adm.microsoft-ds: P 2945:3043(98) ack 1154 win 64382
16:51:56.545441
IP e002-1114.global.adm.1036 > s002-0045.global.adm.microsoft-ds: P 3043:3155(112) ack 1632 win 65535
16:51:56.545451
IP e002-1114.global.adm.1036 > s002-0045.global.adm.microsoft-ds: P 3043:3155(112) ack 1632 win 65535
16:51:56.546603
IP e002-1114.global.adm.1036 > s002-0045.global.adm.microsoft-ds: P 3155:3269(114) ack 2512 win 64655
16:51:56.546613
IP e002-1114.global.adm.1036 > s002-0045.global.adm.microsoft-ds: P 3155:3269(114) ack 2512 win 64655
16:51:56.547337
IP e002-1114.global.adm.1036 > s002-0045.global.adm.microsoft-ds: P 3269:3359(90) ack 2578 win 64589
16:51:56.547347
IP e002-1114.global.adm.1036 > s002-0045.global.adm.microsoft-ds: P 3269:3359(90) ack 2578 win 64589
16:51:56.548039
IP e002-1114.global.adm.1036 > s002-0045.global.adm.microsoft-ds: P 3359:3435(76) ack 2717 win 64450
16:51:56.548048
IP e002-1114.global.adm.1036 > s002-0045.global.adm.microsoft-ds: P 3359:3435(76) ack 2717 win 64450
16:51:56.548576
IP e002-1114.global.adm.1036 > s002-0045.global.adm.microsoft-ds: P 3435:3480(45) ack 2789 win 64378
16:51:56.548585
IP e002-1114.global.adm.1036 > s002-0045.global.adm.microsoft-ds: P 3435:3480(45) ack 2789 win 64378
16:51:56.549119
IP e002-1114.global.adm.1036 > s002-0045.global.adm.microsoft-ds: P 3480:3694(214) ack 2828 win 64339
16:51:56.549130
IP e002-1114.global.adm.1036 > s002-0045.global.adm.microsoft-ds: P 3480:3694(214) ack 2828 win 64339
16:51:56.549878
IP e002-1114.global.adm.1036 > s002-0045.global.adm.microsoft-ds: P 3694:3908(214) ack 2932 win 64235
16:51:56.549887
IP e002-1114.global.adm.1036 > s002-0045.global.adm.microsoft-ds: P 3694:3908(214) ack 2932 win 64235
16:51:56.550790
IP e002-1114.global.adm.1036 > s002-0045.global.adm.microsoft-ds: P 3908:4132(224) ack 3052 win 64115
16:51:56.550798
IP e002-1114.global.adm.1036 > s002-0045.global.adm.microsoft-ds: P 3908:4132(224) ack 3052 win 64115
16:51:56.551522
IP e002-1114.global.adm.1036 > s002-0045.global.adm.microsoft-ds: P 4132:4208(76) ack 3191 win 65535
16:51:56.551530
IP e002-1114.global.adm.1036 > s002-0045.global.adm.microsoft-ds: P 4132:4208(76) ack 3191 win 65535
16:51:56.552082
IP e002-1114.global.adm.1036 > s002-0045.global.adm.microsoft-ds: P 4208:4283(75) ack 3263 win 65463
16:51:56.552094
IP e002-1114.global.adm.1036 > s002-0045.global.adm.microsoft-ds: P 4208:4283(75) ack 3263 win 65463
16:51:56.552503
IP e002-1114.global.adm.1036 > s002-0045.global.adm.microsoft-ds: P 4283:4359(76) ack 3306 win 65420
16:51:56.552514
IP e002-1114.global.adm.1036 > s002-0045.global.adm.microsoft-ds: P 4283:4359(76) ack 3306 win 65420
16:51:56.552947
IP e002-1114.global.adm.1036 > s002-0045.global.adm.microsoft-ds: P 4359:4422(63) ack 3394 win 65332
16:51:56.552957
IP e002-1114.global.adm.1036 > s002-0045.global.adm.microsoft-ds: P 4359:4422(63) ack 3394 win 65332
16:51:56.553438
IP e002-1114.global.adm.1036 > s002-0045.global.adm.microsoft-ds: P 4422:4497(75) ack 3486 win 65240
16:51:56.553448
IP e002-1114.global.adm.1036 > s002-0045.global.adm.microsoft-ds: P 4422:4497(75) ack 3486 win 65240
16:51:56.553851
IP e002-1114.global.adm.1036 > s002-0045.global.adm.microsoft-ds: P 4497:4542(45) ack 3529 win 65197
16:51:56.553860
IP e002-1114.global.adm.1036 > s002-0045.global.adm.microsoft-ds: P 4497:4542(45) ack 3529 win 65197
16:51:56.554591
IP e002-1114.global.adm.1036 > s002-0045.global.adm.microsoft-ds: P 4542:4756(214) ack 3568 win 65158
16:51:56.554601
IP e002-1114.global.adm.1036 > s002-0045.global.adm.microsoft-ds: P 4542:4756(214) ack 3568 win 65158
16:51:56.557416
IP e002-1114.global.adm.1049 > s002-0045.global.adm.ldap: P 3024:3085(61) ack 7625 win 64296
16:51:56.557427
IP e002-1114.global.adm.1049 > s002-0045.global.adm.ldap: P 3024:3085(61) ack 7625 win 64296
16:51:56.557610
IP e002-1114.global.adm.1049 > s002-0045.global.adm.ldap: F 3085:3085(0) ack 7625 win 64296
16:51:56.557621
IP e002-1114.global.adm.1049 > s002-0045.global.adm.ldap: F 3085:3085(0) ack 7625 win 64296
16:51:56.557964
IP e002-1114.global.adm.1049 > s002-0045.global.adm.ldap: . ack 7626 win 64296
16:51:56.557973
IP e002-1114.global.adm.1049 > s002-0045.global.adm.ldap: . ack 7626 win 64296
16:51:56.562311
IP e002-1114.global.adm > s002-0045.global.adm: icmp 8: echo request seq 1024
16:51:56.562358
IP e002-1114.global.adm > s002-0045.global.adm: icmp 8: echo request seq 1024
16:51:56.564043
IP e002-1114.global.adm.1043 > s002-0045.global.adm.loc-srv: P 228:384(156) ack 213 win 65323
16:51:56.564055
IP e002-1114.global.adm.1043 > s002-0045.global.adm.loc-srv: P 228:384(156) ack 213 win 65323
16:51:56.565352
IP e002-1114.global.adm.1054 > s002-0045.global.adm.1026: S 713973122:713973122(0) win 65535 <mss 1460,nop,nop,sackOK>
16:51:56.565390
IP e002-1114.global.adm.1054 > s002-0045.global.adm.1026: S 713973122:713973122(0) win 65535 <mss 1460,nop,nop,sackOK>
16:51:56.565631
IP e002-1114.global.adm.1054 > s002-0045.global.adm.1026: . ack 2907567588 win 65535
16:51:56.565641
IP e002-1114.global.adm.1054 > s002-0045.global.adm.1026: . ack 1 win 65535
16:51:56.566994
IP e002-1114.global.adm.1055 > s002-0045.global.adm.kerberos-sec:
16:51:56.567034
IP e002-1114.global.adm.1055 > s002-0045.global.adm.kerberos-sec:
16:51:56.571706
IP e002-1114.global.adm.1056 > s002-0045.global.adm.kerberos-sec:
16:51:56.571744
IP e002-1114.global.adm.1056 > s002-0045.global.adm.kerberos-sec:
16:51:56.575025
IP e002-1114.global.adm.1054 > s002-0045.global.adm.1026: . 0:1460(1460) ack 1 win 65535
16:51:56.575037
IP e002-1114.global.adm.1054 > s002-0045.global.adm.1026: . 0:1460(1460) ack 1 win 65535
16:51:56.575118
IP e002-1114.global.adm.1054 > s002-0045.global.adm.1026: P 1460:2579(1119) ack 1 win 65535
16:51:56.575133
IP e002-1114.global.adm.1054 > s002-0045.global.adm.1026: P 1460:2579(1119) ack 1 win 65535
16:51:56.577657
IP e002-1114.global.adm.1054 > s002-0045.global.adm.1026: P 2579:2756(177) ack 213 win 65323
16:51:56.577672
IP e002-1114.global.adm.1054 > s002-0045.global.adm.1026: P 2579:2756(177) ack 213 win 65323
16:51:56.578878
IP e002-1114.global.adm.1054 > s002-0045.global.adm.1026: P 2756:2897(141) ack 286 win 65250
16:51:56.578887
IP e002-1114.global.adm.1054 > s002-0045.global.adm.1026: P 2756:2897(141) ack 286 win 65250
16:51:56.580052
IP e002-1114.global.adm.1054 > s002-0045.global.adm.1026: P 2897:3086(189) ack 427 win 65109
16:51:56.580062
IP e002-1114.global.adm.1054 > s002-0045.global.adm.1026: P 2897:3086(189) ack 427 win 65109
16:51:56.581379
IP e002-1114.global.adm.1054 > s002-0045.global.adm.1026: P 3086:3275(189) ack 792 win 64744
16:51:56.581391
IP e002-1114.global.adm.1054 > s002-0045.global.adm.1026: P 3086:3275(189) ack 792 win 64744
16:51:56.582658
IP e002-1114.global.adm.1054 > s002-0045.global.adm.1026: P 3275:3384(109) ack 1045 win 64491
16:51:56.582667
IP e002-1114.global.adm.1054 > s002-0045.global.adm.1026: P 3275:3384(109) ack 1045 win 64491
16:51:56.597406
IP e002-1114.global.adm.1057 > s002-0045.global.adm.ldap: S 179219477:179219477(0) win 65535 <mss 1460,nop,nop,sackOK>
16:51:56.597459
IP e002-1114.global.adm.1057 > s002-0045.global.adm.ldap: S 179219477:179219477(0) win 65535 <mss 1460,nop,nop,sackOK>
16:51:56.597708
IP e002-1114.global.adm.1057 > s002-0045.global.adm.ldap: . ack 1629578696 win 65535
16:51:56.597718
IP e002-1114.global.adm.1057 > s002-0045.global.adm.ldap: . ack 1 win 65535
16:51:56.600392
IP e002-1114.global.adm.nim > s002-0045.global.adm.kerberos-sec:
16:51:56.600431
IP e002-1114.global.adm.nim > s002-0045.global.adm.kerberos-sec:
16:51:56.604234
IP e002-1114.global.adm.1057 > s002-0045.global.adm.ldap: P 0:1328(1328) ack 1 win 65535
16:51:56.604245
IP e002-1114.global.adm.1057 > s002-0045.global.adm.ldap: P 0:1328(1328) ack 1 win 65535
16:51:56.607428
IP e002-1114.global.adm.1057 > s002-0045.global.adm.ldap: P 1328:1876(548) ack 189 win 65347
16:51:56.607439
IP e002-1114.global.adm.1057 > s002-0045.global.adm.ldap: P 1328:1876(548) ack 189 win 65347
16:51:56.610295
IP e002-1114.global.adm.1057 > s002-0045.global.adm.ldap: P 1876:2700(824) ack 1450 win 64086
16:51:56.610306
IP e002-1114.global.adm.1057 > s002-0045.global.adm.ldap: P 1876:2700(824) ack 1450 win 64086
16:51:56.612586
IP e002-1114.global.adm.1057 > s002-0045.global.adm.ldap: . ack 4370 win 65535
16:51:56.612595
IP e002-1114.global.adm.1057 > s002-0045.global.adm.ldap: . ack 4370 win 65535
16:51:56.612733
IP e002-1114.global.adm.1057 > s002-0045.global.adm.ldap: . ack 5609 win 64296
16:51:56.612747
IP e002-1114.global.adm.1057 > s002-0045.global.adm.ldap: . ack 5609 win 64296
16:51:56.615101
IP e002-1114.global.adm.nimreg > s002-0045.global.adm.kerberos-sec:
16:51:56.615139
IP e002-1114.global.adm.nimreg > s002-0045.global.adm.kerberos-sec:
16:51:56.619510
IP e002-1114.global.adm.1036 > s002-0045.global.adm.microsoft-ds: . 4756:6216(1460) ack 3607 win 65119
16:51:56.619522
IP e002-1114.global.adm.1036 > s002-0045.global.adm.microsoft-ds: . 4756:6216(1460) ack 3607 win 65119
16:51:56.619612
IP e002-1114.global.adm.1036 > s002-0045.global.adm.microsoft-ds: P 6216:7438(1222) ack 3607 win 65119
16:51:56.619630
IP e002-1114.global.adm.1036 > s002-0045.global.adm.microsoft-ds: P 6216:7438(1222) ack 3607 win 65119
16:51:56.643770
IP e002-1114.global.adm.1036 > s002-0045.global.adm.microsoft-ds: P 7438:7552(114) ack 3944 win 64782
16:51:56.643803
IP e002-1114.global.adm.1036 > s002-0045.global.adm.microsoft-ds: P 7438:7552(114) ack 3944 win 64782
16:51:56.644747
IP e002-1114.global.adm.1036 > s002-0045.global.adm.microsoft-ds: P 7552:7766(214) ack 4010 win 64716
16:51:56.644774
IP e002-1114.global.adm.1036 > s002-0045.global.adm.microsoft-ds: P 7552:7766(214) ack 4010 win 64716
16:51:56.645762
IP e002-1114.global.adm.1036 > s002-0045.global.adm.microsoft-ds: P 7766:7980(214) ack 4114 win 64612
16:51:56.645773
IP e002-1114.global.adm.1036 > s002-0045.global.adm.microsoft-ds: P 7766:7980(214) ack 4114 win 64612
16:51:56.646831
IP e002-1114.global.adm.1036 > s002-0045.global.adm.microsoft-ds: P 7980:8204(224) ack 4234 win 64492
16:51:56.646841
IP e002-1114.global.adm.1036 > s002-0045.global.adm.microsoft-ds: P 7980:8204(224) ack 4234 win 64492
16:51:56.647739
IP e002-1114.global.adm.1036 > s002-0045.global.adm.microsoft-ds: P 8204:8279(75) ack 4373 win 64353
16:51:56.647748
IP e002-1114.global.adm.1036 > s002-0045.global.adm.microsoft-ds: P 8204:8279(75) ack 4373 win 64353
16:51:56.648280
IP e002-1114.global.adm.1036 > s002-0045.global.adm.microsoft-ds: P 8279:8355(76) ack 4416 win 64310
16:51:56.648290
IP e002-1114.global.adm.1036 > s002-0045.global.adm.microsoft-ds: P 8279:8355(76) ack 4416 win 64310
16:51:56.648838
IP e002-1114.global.adm.1036 > s002-0045.global.adm.microsoft-ds: P 8355:8418(63) ack 4504 win 64222
16:51:56.648849
IP e002-1114.global.adm.1036 > s002-0045.global.adm.microsoft-ds: P 8355:8418(63) ack 4504 win 64222
16:51:56.649434
IP e002-1114.global.adm.1036 > s002-0045.global.adm.microsoft-ds: P 8418:8493(75) ack 4596 win 64130
16:51:56.649444
IP e002-1114.global.adm.1036 > s002-0045.global.adm.microsoft-ds: P 8418:8493(75) ack 4596 win 64130
16:51:56.649944
IP e002-1114.global.adm.1036 > s002-0045.global.adm.microsoft-ds: P 8493:8538(45) ack 4639 win 64087
16:51:56.649954
IP e002-1114.global.adm.1036 > s002-0045.global.adm.microsoft-ds: P 8493:8538(45) ack 4639 win 64087
16:51:56.650751
IP e002-1114.global.adm.1036 > s002-0045.global.adm.microsoft-ds: P 8538:8752(214) ack 4678 win 65535
16:51:56.650761
IP e002-1114.global.adm.1036 > s002-0045.global.adm.microsoft-ds: P 8538:8752(214) ack 4678 win 65535
16:51:56.653359
IP e002-1114.global.adm.1057 > s002-0045.global.adm.ldap: P 2700:2761(61) ack 5609 win 64296
16:51:56.653369
IP e002-1114.global.adm.1057 > s002-0045.global.adm.ldap: P 2700:2761(61) ack 5609 win 64296
16:51:56.653612
IP e002-1114.global.adm.1057 > s002-0045.global.adm.ldap: F 2761:2761(0) ack 5609 win 64296
16:51:56.653624
IP e002-1114.global.adm.1057 > s002-0045.global.adm.ldap: F 2761:2761(0) ack 5609 win 64296
16:51:56.653928
IP e002-1114.global.adm.1057 > s002-0045.global.adm.ldap: . ack 5610 win 64296
16:51:56.653938
IP e002-1114.global.adm.1057 > s002-0045.global.adm.ldap: . ack 5610 win 64296
16:51:56.738575
IP e002-1114.global.adm.1054 > s002-0045.global.adm.1026: . ack 1154 win 64382
16:51:56.738591
IP e002-1114.global.adm.1054 > s002-0045.global.adm.1026: . ack 1154 win 64382
16:51:56.738579
IP e002-1114.global.adm.1043 > s002-0045.global.adm.loc-srv: . ack 365 win 65171
16:51:56.738600
IP e002-1114.global.adm.1043 > s002-0045.global.adm.loc-srv: . ack 365 win 65171
16:51:56.847948
IP e002-1114.global.adm.1036 > s002-0045.global.adm.microsoft-ds: . ack 4717 win 65496
16:51:56.847981
IP e002-1114.global.adm.1036 > s002-0045.global.adm.microsoft-ds: . ack 4717 win 65496
16:51:56.879259
IP e002-1114.global.adm.1036 > s002-0045.global.adm.microsoft-ds: P 8752:8791(39) ack 4717 win 65496
16:51:56.879293
IP e002-1114.global.adm.1036 > s002-0045.global.adm.microsoft-ds: P 8752:8791(39) ack 4717 win 65496
16:51:56.879972
IP e002-1114.global.adm.1036 > s002-0045.global.adm.microsoft-ds: P 8791:8834(43) ack 4756 win 65457
16:51:56.879981
IP e002-1114.global.adm.1036 > s002-0045.global.adm.microsoft-ds: P 8791:8834(43) ack 4756 win 65457
16:51:56.880613
IP e002-1114.global.adm.1036 > s002-0045.global.adm.microsoft-ds: P 8834:8873(39) ack 4799 win 65414
16:51:56.880623
IP e002-1114.global.adm.1036 > s002-0045.global.adm.microsoft-ds: P 8834:8873(39) ack 4799 win 65414
16:51:56.881305
IP e002-1114.global.adm.1036 > s002-0045.global.adm.microsoft-ds: P 8873:8916(43) ack 4838 win 65375
16:51:56.881315
IP e002-1114.global.adm.1036 > s002-0045.global.adm.microsoft-ds: P 8873:8916(43) ack 4838 win 65375
16:51:56.882403
IP e002-1114.global.adm.1036 > s002-0045.global.adm.microsoft-ds: P 8916:8955(39) ack 4881 win 65332
16:51:56.882413
IP e002-1114.global.adm.1036 > s002-0045.global.adm.microsoft-ds: P 8916:8955(39) ack 4881 win 65332
16:51:56.883071
IP e002-1114.global.adm.1036 > s002-0045.global.adm.microsoft-ds: F 8955:8955(0) ack 4920 win 65293
16:51:56.883081
IP e002-1114.global.adm.1036 > s002-0045.global.adm.microsoft-ds: F 8955:8955(0) ack 4920 win 65293
16:51:56.883313
IP e002-1114.global.adm.1036 > s002-0045.global.adm.microsoft-ds: . ack 4921 win 65293
16:51:56.883323
IP e002-1114.global.adm.1036 > s002-0045.global.adm.microsoft-ds: . ack 4921 win 65293
16:51:57.500484
IP e002-1114.global.adm.1053 > cdn-68-142-101-254-mia1.llnw.net.http: . ack 214 win 65323
16:51:57.514024
IP e002-1114.global.adm.1053 > cdn-68-142-101-254-mia1.llnw.net.http: F 158:158(0) ack 214 win 65323
16:51:58.009769
IP e002-1114.global.adm.1062 > s002-0045.global.adm.ldap: S 281131489:281131489(0) win 65535 <mss 1460,nop,nop,sackOK>
16:51:58.009823
IP e002-1114.global.adm.1062 > s002-0045.global.adm.ldap: S 281131489:281131489(0) win 65535 <mss 1460,nop,nop,sackOK>
16:51:58.010074
IP e002-1114.global.adm.1062 > s002-0045.global.adm.ldap: . ack 3863265151 win 65535
16:51:58.010086
IP e002-1114.global.adm.1062 > s002-0045.global.adm.ldap: . ack 1 win 65535
16:51:58.010605
IP e002-1114.global.adm.1062 > s002-0045.global.adm.ldap: P 0:350(350) ack 1 win 65535
16:51:58.010622
IP e002-1114.global.adm.1062 > s002-0045.global.adm.ldap: P 0:350(350) ack 1 win 65535
16:51:58.012396
IP e002-1114.global.adm.1062 > s002-0045.global.adm.ldap: . ack 1990 win 65535
16:51:58.012406
IP e002-1114.global.adm.1062 > s002-0045.global.adm.ldap: . ack 1990 win 65535
16:51:58.014246
IP e002-1114.global.adm.1062 > s002-0045.global.adm.ldap: P 350:1636(1286) ack 1990 win 65535
16:51:58.014262
IP e002-1114.global.adm.1062 > s002-0045.global.adm.ldap: P 350:1636(1286) ack 1990 win 65535
16:51:58.018151
IP e002-1114.global.adm.1062 > s002-0045.global.adm.ldap: P 1636:1771(135) ack 2178 win 65347
16:51:58.018166
IP e002-1114.global.adm.1062 > s002-0045.global.adm.ldap: P 1636:1771(135) ack 2178 win 65347
16:51:58.019197
IP e002-1114.global.adm.1062 > s002-0045.global.adm.ldap: P 1771:1891(120) ack 2349 win 65176
16:51:58.019208
IP e002-1114.global.adm.1062 > s002-0045.global.adm.ldap: P 1771:1891(120) ack 2349 win 65176
16:51:58.020126
IP e002-1114.global.adm.1062 > s002-0045.global.adm.ldap: P 1891:2105(214) ack 2568 win 64957
16:51:58.020135
IP e002-1114.global.adm.1062 > s002-0045.global.adm.ldap: P 1891:2105(214) ack 2568 win 64957
16:51:58.021164
IP e002-1114.global.adm.1062 > s002-0045.global.adm.ldap: P 2105:2321(216) ack 2802 win 64723
16:51:58.021174
IP e002-1114.global.adm.1062 > s002-0045.global.adm.ldap: P 2105:2321(216) ack 2802 win 64723
16:51:58.024003
IP e002-1114.global.adm.1062 > s002-0045.global.adm.ldap: P 2321:2382(61) ack 3186 win 64339
16:51:58.024013
IP e002-1114.global.adm.1062 > s002-0045.global.adm.ldap: P 2321:2382(61) ack 3186 win 64339
16:51:58.024192
IP e002-1114.global.adm.1062 > s002-0045.global.adm.ldap: F 2382:2382(0) ack 3186 win 64339
16:51:58.024206
IP e002-1114.global.adm.1062 > s002-0045.global.adm.ldap: F 2382:2382(0) ack 3186 win 64339
16:51:58.024480
IP e002-1114.global.adm.1062 > s002-0045.global.adm.ldap: . ack 3187 win 64339
16:51:58.024489
IP e002-1114.global.adm.1062 > s002-0045.global.adm.ldap: . ack 3187 win 64339
16:51:58.161582
IP e002-1114.global.adm.netbios-ns > 10.2.11.63.netbios-ns: NBT UDP PACKET(137): REGISTRATION; REQUEST; BROADCAST
16:51:58.910591
IP e002-1114.global.adm.netbios-ns > 10.2.11.63.netbios-ns: NBT UDP PACKET(137): REGISTRATION; REQUEST; BROADCAST
16:51:59.660626
IP e002-1114.global.adm.netbios-ns > 10.2.11.63.netbios-ns: NBT UDP PACKET(137): REGISTRATION; REQUEST; BROADCAST
16:52:00.296212
IP e002-1114.global.adm.netbios-ns > 10.2.11.63.netbios-ns: NBT UDP PACKET(137): QUERY; REQUEST; BROADCAST
16:52:00.296413
IP e002-1114.global.adm > s002-0045.global.adm: icmp 40: echo request seq 1280
16:52:00.296468
IP e002-1114.global.adm > s002-0045.global.adm: icmp 40: echo request seq 1280
16:52:00.296887
IP e002-1114.global.adm.1063 > s002-0045.global.adm.microsoft-ds: S 2224068626:2224068626(0) win 65535 <mss 1460,nop,nop,sackOK>
16:52:00.296921
IP e002-1114.global.adm.1063 > s002-0045.global.adm.microsoft-ds: S 2224068626:2224068626(0) win 65535 <mss 1460,nop,nop,sackOK>
16:52:00.297166
IP e002-1114.global.adm.1063 > s002-0045.global.adm.microsoft-ds: . ack 1445125493 win 65535
16:52:00.297176
IP e002-1114.global.adm.1063 > s002-0045.global.adm.microsoft-ds: . ack 1 win 65535
16:52:00.297342
IP e002-1114.global.adm.1063 > s002-0045.global.adm.microsoft-ds: P 0:137(137) ack 1 win 65535
16:52:00.297364
IP e002-1114.global.adm.1063 > s002-0045.global.adm.microsoft-ds: P 0:137(137) ack 1 win 65535
16:52:00.299248
IP e002-1114.global.adm.1063 > s002-0045.global.adm.microsoft-ds: . 137:1597(1460) ack 183 win 65353
16:52:00.299261
IP e002-1114.global.adm.1063 > s002-0045.global.adm.microsoft-ds: . 137:1597(1460) ack 183 win 65353
16:52:00.299339
IP e002-1114.global.adm.1063 > s002-0045.global.adm.microsoft-ds: P 1597:2759(1162) ack 183 win 65353
16:52:00.299434
IP e002-1114.global.adm.1063 > s002-0045.global.adm.microsoft-ds: P 1597:2759(1162) ack 183 win 65353
16:52:00.301479
IP e002-1114.global.adm.1063 > s002-0045.global.adm.microsoft-ds: P 2759:2847(88) ack 520 win 65016
16:52:00.301511
IP e002-1114.global.adm.1063 > s002-0045.global.adm.microsoft-ds: P 2759:2847(88) ack 520 win 65016
16:52:00.302734
IP e002-1114.global.adm.1063 > s002-0045.global.adm.microsoft-ds: P 2847:2951(104) ack 580 win 64956
16:52:00.302744
IP e002-1114.global.adm.1063 > s002-0045.global.adm.microsoft-ds: P 2847:2951(104) ack 580 win 64956
16:52:00.303634
IP e002-1114.global.adm.1063 > s002-0045.global.adm.microsoft-ds: P 2951:3091(140) ack 719 win 64817
16:52:00.303644
IP e002-1114.global.adm.1063 > s002-0045.global.adm.microsoft-ds: P 2951:3091(140) ack 719 win 64817
16:52:00.304222
IP e002-1114.global.adm.1063 > s002-0045.global.adm.microsoft-ds: P 3091:3154(63) ack 770 win 64766
16:52:00.304231
IP e002-1114.global.adm.1063 > s002-0045.global.adm.microsoft-ds: P 3091:3154(63) ack 770 win 64766
16:52:00.304809
IP e002-1114.global.adm.1063 > s002-0045.global.adm.microsoft-ds: P 3154:3334(180) ack 902 win 64634
16:52:00.304819
IP e002-1114.global.adm.1063 > s002-0045.global.adm.microsoft-ds: P 3154:3334(180) ack 902 win 64634
16:52:00.305647
IP e002-1114.global.adm.1063 > s002-0045.global.adm.microsoft-ds: P 3334:3468(134) ack 1010 win 64526
16:52:00.305657
IP e002-1114.global.adm.1063 > s002-0045.global.adm.microsoft-ds: P 3334:3468(134) ack 1010 win 64526
16:52:00.306459
IP e002-1114.global.adm.1063 > s002-0045.global.adm.microsoft-ds: P 3468:3600(132) ack 1170 win 64366
16:52:00.306469
IP e002-1114.global.adm.1063 > s002-0045.global.adm.microsoft-ds: P 3468:3600(132) ack 1170 win 64366
16:52:00.307279
IP e002-1114.global.adm.1063 > s002-0045.global.adm.microsoft-ds: P 3600:3645(45) ack 1278 win 64258
16:52:00.307289
IP e002-1114.global.adm.1063 > s002-0045.global.adm.microsoft-ds: P 3600:3645(45) ack 1278 win 64258
16:52:00.308396
IP e002-1114.global.adm.1063 > s002-0045.global.adm.microsoft-ds: P 3645:3745(100) ack 1317 win 64219
16:52:00.308405
IP e002-1114.global.adm.1063 > s002-0045.global.adm.microsoft-ds: P 3645:3745(100) ack 1317 win 64219
16:52:00.309453
IP e002-1114.global.adm.1063 > s002-0045.global.adm.microsoft-ds: P 3745:3885(140) ack 1456 win 64080
16:52:00.309463
IP e002-1114.global.adm.1063 > s002-0045.global.adm.microsoft-ds: P 3745:3885(140) ack 1456 win 64080
16:52:00.310224
IP e002-1114.global.adm.1063 > s002-0045.global.adm.microsoft-ds: P 3885:3948(63) ack 1507 win 65535
16:52:00.310234
IP e002-1114.global.adm.1063 > s002-0045.global.adm.microsoft-ds: P 3885:3948(63) ack 1507 win 65535
16:52:00.310838
IP e002-1114.global.adm.1063 > s002-0045.global.adm.microsoft-ds: P 3948:4120(172) ack 1639 win 65403
16:52:00.310848
IP e002-1114.global.adm.1063 > s002-0045.global.adm.microsoft-ds: P 3948:4120(172) ack 1639 win 65403
16:52:00.311672
IP e002-1114.global.adm.1063 > s002-0045.global.adm.microsoft-ds: P 4120:4284(164) ack 1763 win 65279
16:52:00.311682
IP e002-1114.global.adm.1063 > s002-0045.global.adm.microsoft-ds: P 4120:4284(164) ack 1763 win 65279
16:52:00.312445
IP e002-1114.global.adm.1063 > s002-0045.global.adm.microsoft-ds: P 4284:4448(164) ack 1883 win 65159
16:52:00.312454
IP e002-1114.global.adm.1063 > s002-0045.global.adm.microsoft-ds: P 4284:4448(164) ack 1883 win 65159
16:52:00.313660
IP e002-1114.global.adm.1063 > s002-0045.global.adm.microsoft-ds: P 4448:4634(186) ack 1991 win 65051
16:52:00.313669
IP e002-1114.global.adm.1063 > s002-0045.global.adm.microsoft-ds: P 4448:4634(186) ack 1991 win 65051
16:52:00.314751
IP e002-1114.global.adm.1063 > s002-0045.global.adm.microsoft-ds: P 4634:4774(140) ack 2111 win 64931
16:52:00.314760
IP e002-1114.global.adm.1063 > s002-0045.global.adm.microsoft-ds: P 4634:4774(140) ack 2111 win 64931
16:52:00.315856
IP e002-1114.global.adm.1063 > s002-0045.global.adm.microsoft-ds: P 4774:4908(134) ack 2219 win 64823
16:52:00.315867
IP e002-1114.global.adm.1063 > s002-0045.global.adm.microsoft-ds: P 4774:4908(134) ack 2219 win 64823
16:52:00.316936
IP e002-1114.global.adm.1063 > s002-0045.global.adm.microsoft-ds: P 4908:5040(132) ack 2335 win 64707
16:52:00.316947
IP e002-1114.global.adm.1063 > s002-0045.global.adm.microsoft-ds: P 4908:5040(132) ack 2335 win 64707
16:52:00.317869
IP e002-1114.global.adm.1063 > s002-0045.global.adm.microsoft-ds: P 5040:5172(132) ack 2443 win 64599
16:52:00.317879
IP e002-1114.global.adm.1063 > s002-0045.global.adm.microsoft-ds: P 5040:5172(132) ack 2443 win 64599
16:52:00.318623
IP e002-1114.global.adm.1063 > s002-0045.global.adm.microsoft-ds: P 5172:5304(132) ack 2551 win 64491
16:52:00.318634
IP e002-1114.global.adm.1063 > s002-0045.global.adm.microsoft-ds: P 5172:5304(132) ack 2551 win 64491
16:52:00.319291
IP e002-1114.global.adm.1063 > s002-0045.global.adm.microsoft-ds: P 5304:5349(45) ack 2659 win 64383
16:52:00.319302
IP e002-1114.global.adm.1063 > s002-0045.global.adm.microsoft-ds: P 5304:5349(45) ack 2659 win 64383
16:52:00.320152
IP e002-1114.global.adm.1063 > s002-0045.global.adm.microsoft-ds: P 5349:5453(104) ack 2698 win 64344
16:52:00.320188
IP e002-1114.global.adm.1063 > s002-0045.global.adm.microsoft-ds: P 5349:5453(104) ack 2698 win 64344
16:52:00.321048
IP e002-1114.global.adm.1063 > s002-0045.global.adm.microsoft-ds: P 5453:5593(140) ack 2837 win 64205
16:52:00.321083
IP e002-1114.global.adm.1063 > s002-0045.global.adm.microsoft-ds: P 5453:5593(140) ack 2837 win 64205
16:52:00.321662
IP e002-1114.global.adm.1063 > s002-0045.global.adm.microsoft-ds: P 5593:5656(63) ack 2888 win 64154
16:52:00.321694
IP e002-1114.global.adm.1063 > s002-0045.global.adm.microsoft-ds: P 5593:5656(63) ack 2888 win 64154
16:52:00.322415
IP e002-1114.global.adm.1063 > s002-0045.global.adm.microsoft-ds: P 5656:5780(124) ack 3020 win 65535
16:52:00.322427
IP e002-1114.global.adm.1063 > s002-0045.global.adm.microsoft-ds: P 5656:5780(124) ack 3020 win 65535
16:52:00.323257
IP e002-1114.global.adm.1063 > s002-0045.global.adm.microsoft-ds: P 5780:6088(308) ack 3128 win 65427
16:52:00.323269
IP e002-1114.global.adm.1063 > s002-0045.global.adm.microsoft-ds: P 5780:6088(308) ack 3128 win 65427
16:52:00.324148
IP e002-1114.global.adm.1063 > s002-0045.global.adm.microsoft-ds: P 6088:6316(228) ack 3236 win 65319
16:52:00.324158
IP e002-1114.global.adm.1063 > s002-0045.global.adm.microsoft-ds: P 6088:6316(228) ack 3236 win 65319
16:52:00.324902
IP e002-1114.global.adm.1063 > s002-0045.global.adm.microsoft-ds: P 6316:6548(232) ack 3368 win 65187
16:52:00.324911
IP e002-1114.global.adm.1063 > s002-0045.global.adm.microsoft-ds: P 6316:6548(232) ack 3368 win 65187
16:52:00.325567
IP e002-1114.global.adm.1063 > s002-0045.global.adm.microsoft-ds: P 6548:6784(236) ack 3500 win 65055
16:52:00.325575
IP e002-1114.global.adm.1063 > s002-0045.global.adm.microsoft-ds: P 6548:6784(236) ack 3500 win 65055
16:52:00.326221
IP e002-1114.global.adm.1063 > s002-0045.global.adm.microsoft-ds: P 6784:7024(240) ack 3632 win 64923
16:52:00.326230
IP e002-1114.global.adm.1063 > s002-0045.global.adm.microsoft-ds: P 6784:7024(240) ack 3632 win 64923
16:52:00.326865
IP e002-1114.global.adm.1063 > s002-0045.global.adm.microsoft-ds: P 7024:7252(228) ack 3764 win 64791
16:52:00.326874
IP e002-1114.global.adm.1063 > s002-0045.global.adm.microsoft-ds: P 7024:7252(228) ack 3764 win 64791
16:52:00.327532
IP e002-1114.global.adm.1063 > s002-0045.global.adm.microsoft-ds: P 7252:7492(240) ack 3896 win 64659
16:52:00.327557
IP e002-1114.global.adm.1063 > s002-0045.global.adm.microsoft-ds: P 7252:7492(240) ack 3896 win 64659
16:52:00.328213
IP e002-1114.global.adm.1063 > s002-0045.global.adm.microsoft-ds: P 7492:7716(224) ack 4028 win 64527
16:52:00.328244
IP e002-1114.global.adm.1063 > s002-0045.global.adm.microsoft-ds: P 7492:7716(224) ack 4028 win 64527
16:52:00.328901
IP e002-1114.global.adm.1063 > s002-0045.global.adm.microsoft-ds: P 7716:7956(240) ack 4160 win 64395
16:52:00.328925
IP e002-1114.global.adm.1063 > s002-0045.global.adm.microsoft-ds: P 7716:7956(240) ack 4160 win 64395
16:52:00.329566
IP e002-1114.global.adm.1063 > s002-0045.global.adm.microsoft-ds: P 7956:8208(252) ack 4292 win 64263
16:52:00.329577
IP e002-1114.global.adm.1063 > s002-0045.global.adm.microsoft-ds: P 7956:8208(252) ack 4292 win 64263
16:52:00.330222
IP e002-1114.global.adm.1063 > s002-0045.global.adm.microsoft-ds: P 8208:8440(232) ack 4424 win 64131
16:52:00.330231
IP e002-1114.global.adm.1063 > s002-0045.global.adm.microsoft-ds: P 8208:8440(232) ack 4424 win 64131
16:52:00.330867
IP e002-1114.global.adm.1063 > s002-0045.global.adm.microsoft-ds: P 8440:8672(232) ack 4556 win 65535
16:52:00.330876
IP e002-1114.global.adm.1063 > s002-0045.global.adm.microsoft-ds: P 8440:8672(232) ack 4556 win 65535
16:52:00.331578
IP e002-1114.global.adm.1063 > s002-0045.global.adm.microsoft-ds: P 8672:8900(228) ack 4684 win 65407
16:52:00.331587
IP e002-1114.global.adm.1063 > s002-0045.global.adm.microsoft-ds: P 8672:8900(228) ack 4684 win 65407
16:52:00.332240
IP e002-1114.global.adm.1063 > s002-0045.global.adm.microsoft-ds: P 8900:9132(232) ack 4812 win 65279
16:52:00.332249
IP e002-1114.global.adm.1063 > s002-0045.global.adm.microsoft-ds: P 8900:9132(232) ack 4812 win 65279
16:52:00.332909
IP e002-1114.global.adm.1063 > s002-0045.global.adm.microsoft-ds: P 9132:9364(232) ack 4940 win 65151
16:52:00.332946
IP e002-1114.global.adm.1063 > s002-0045.global.adm.microsoft-ds: P 9132:9364(232) ack 4940 win 65151
16:52:00.333591
IP e002-1114.global.adm.1063 > s002-0045.global.adm.microsoft-ds: P 9364:9584(220) ack 5072 win 65019
16:52:00.333620
IP e002-1114.global.adm.1063 > s002-0045.global.adm.microsoft-ds: P 9364:9584(220) ack 5072 win 65019
16:52:00.334265
IP e002-1114.global.adm.1063 > s002-0045.global.adm.microsoft-ds: P 9584:9808(224) ack 5204 win 64887
16:52:00.334296
IP e002-1114.global.adm.1063 > s002-0045.global.adm.microsoft-ds: P 9584:9808(224) ack 5204 win 64887
16:52:00.334941
IP e002-1114.global.adm.1063 > s002-0045.global.adm.microsoft-ds: P 9808:10032(224) ack 5336 win 64755
16:52:00.334953
IP e002-1114.global.adm.1063 > s002-0045.global.adm.microsoft-ds: P 9808:10032(224) ack 5336 win 64755
16:52:00.335583
IP e002-1114.global.adm.1063 > s002-0045.global.adm.microsoft-ds: P 10032:10260(228) ack 5468 win 64623
16:52:00.335593
IP e002-1114.global.adm.1063 > s002-0045.global.adm.microsoft-ds: P 10032:10260(228) ack 5468 win 64623
16:52:00.336221
IP e002-1114.global.adm.1063 > s002-0045.global.adm.microsoft-ds: P 10260:10484(224) ack 5596 win 64495
16:52:00.336230
IP e002-1114.global.adm.1063 > s002-0045.global.adm.microsoft-ds: P 10260:10484(224) ack 5596 win 64495
16:52:00.336865
IP e002-1114.global.adm.1063 > s002-0045.global.adm.microsoft-ds: P 10484:10716(232) ack 5724 win 64367
16:52:00.336881
IP e002-1114.global.adm.1063 > s002-0045.global.adm.microsoft-ds: P 10484:10716(232) ack 5724 win 64367
16:52:00.337557
IP e002-1114.global.adm.1063 > s002-0045.global.adm.microsoft-ds: P 10716:10948(232) ack 5852 win 64239
16:52:00.337587
IP e002-1114.global.adm.1063 > s002-0045.global.adm.microsoft-ds: P 10716:10948(232) ack 5852 win 64239
16:52:00.33974
IP e002-1114.global.adm.1063 > s002-0045.global.adm.microsoft-ds: P 10948:11184(236) ack 5980 win 64111
16:52:00.339798
IP e002-1114.global.adm.1063 > s002-0045.global.adm.microsoft-ds: P 10948:11184(236) ack 5980 win 64111
16:52:00.340584
IP e002-1114.global.adm.1063 > s002-0045.global.adm.microsoft-ds: P 11184:11408(224) ack 6108 win 65535
16:52:00.340618
IP e002-1114.global.adm.1063 > s002-0045.global.adm.microsoft-ds: P 11184:11408(224) ack 6108 win 65535
16:52:00.341279
IP e002-1114.global.adm.1063 > s002-0045.global.adm.microsoft-ds: P 11408:11624(216) ack 6236 win 65407
16:52:00.341297
IP e002-1114.global.adm.1063 > s002-0045.global.adm.microsoft-ds: P 11408:11624(216) ack 6236 win 65407
16:52:00.341946
IP e002-1114.global.adm.1063 > s002-0045.global.adm.microsoft-ds: P 11624:11840(216) ack 6364 win 65279
16:52:00.341961
IP e002-1114.global.adm.1063 > s002-0045.global.adm.microsoft-ds: P 11624:11840(216) ack 6364 win 65279
16:52:00.342600
IP e002-1114.global.adm.1063 > s002-0045.global.adm.microsoft-ds: P 11840:12056(216) ack 6492 win 65151
16:52:00.342625
IP e002-1114.global.adm.1063 > s002-0045.global.adm.microsoft-ds: P 11840:12056(216) ack 6492 win 65151
16:52:00.343259
IP e002-1114.global.adm.1063 > s002-0045.global.adm.microsoft-ds: P 12056:12272(216) ack 6620 win 65023
16:52:00.343272
IP e002-1114.global.adm.1063 > s002-0045.global.adm.microsoft-ds: P 12056:12272(216) ack 6620 win 65023
16:52:00.343904
IP e002-1114.global.adm.1063 > s002-0045.global.adm.microsoft-ds: P 12272:12492(220) ack 6748 win 64895
16:52:00.343919
IP e002-1114.global.adm.1063 > s002-0045.global.adm.microsoft-ds: P 12272:12492(220) ack 6748 win 64895
16:52:00.344554
IP e002-1114.global.adm.1063 > s002-0045.global.adm.microsoft-ds: P 12492:12708(216) ack 6876 win 64767
16:52:00.344567
IP e002-1114.global.adm.1063 > s002-0045.global.adm.microsoft-ds: P 12492:12708(216) ack 6876 win 64767
16:52:00.345257
IP e002-1114.global.adm.1063 > s002-0045.global.adm.microsoft-ds: P 12708:12924(216) ack 7004 win 64639
16:52:00.345285
IP e002-1114.global.adm.1063 > s002-0045.global.adm.microsoft-ds: P 12708:12924(216) ack 7004 win 64639
16:52:00.346447
IP e002-1114.global.adm.1063 > s002-0045.global.adm.microsoft-ds: P 12924:13136(212) ack 7132 win 64511
16:52:00.346482
IP e002-1114.global.adm.1063 > s002-0045.global.adm.microsoft-ds: P 12924:13136(212) ack 7132 win 64511
16:52:00.350076
IP e002-1114.global.adm.1063 > s002-0045.global.adm.microsoft-ds: P 13136:13344(208) ack 7264 win 64379
16:52:00.350112
IP e002-1114.global.adm.1063 > s002-0045.global.adm.microsoft-ds: P 13136:13344(208) ack 7264 win 64379
16:52:00.350866
IP e002-1114.global.adm.1063 > s002-0045.global.adm.microsoft-ds: P 13344:13556(212) ack 7396 win 64247
16:52:00.350878
IP e002-1114.global.adm.1063 > s002-0045.global.adm.microsoft-ds: P 13344:13556(212) ack 7396 win 64247
16:52:00.351514
IP e002-1114.global.adm.1063 > s002-0045.global.adm.microsoft-ds: P 13556:13776(220) ack 7528 win 64115
16:52:00.351523
IP e002-1114.global.adm.1063 > s002-0045.global.adm.microsoft-ds: P 13556:13776(220) ack 7528 win 64115
16:52:00.352153
IP e002-1114.global.adm.1063 > s002-0045.global.adm.microsoft-ds: P 13776:14000(224) ack 7660 win 65535
16:52:00.352163
IP e002-1114.global.adm.1063 > s002-0045.global.adm.microsoft-ds: P 13776:14000(224) ack 7660 win 65535
16:52:00.352886
IP e002-1114.global.adm.1063 > s002-0045.global.adm.microsoft-ds: P 14000:14224(224) ack 7792 win 65403
16:52:00.352896
IP e002-1114.global.adm.1063 > s002-0045.global.adm.microsoft-ds: P 14000:14224(224) ack 7792 win 65403
16:52:00.353556
IP e002-1114.global.adm.1063 > s002-0045.global.adm.microsoft-ds: P 14224:14436(212) ack 7924 win 65271
16:52:00.353583
IP e002-1114.global.adm.1063 > s002-0045.global.adm.microsoft-ds: P 14224:14436(212) ack 7924 win 65271
16:52:00.354229
IP e002-1114.global.adm.1063 > s002-0045.global.adm.microsoft-ds: P 14436:14644(208) ack 8056 win 65139
16:52:00.354261
IP e002-1114.global.adm.1063 > s002-0045.global.adm.microsoft-ds: P 14436:14644(208) ack 8056 win 65139
16:52:00.354898
IP e002-1114.global.adm.1063 > s002-0045.global.adm.microsoft-ds: P 14644:14872(228) ack 8188 win 65007
16:52:00.355005
IP e002-1114.global.adm.1063 > s002-0045.global.adm.microsoft-ds: P 14644:14872(228) ack 8188 win 65007
16:52:00.355822
IP e002-1114.global.adm.1063 > s002-0045.global.adm.microsoft-ds: P 14872:15108(236) ack 8320 win 64875
16:52:00.355837
IP e002-1114.global.adm.1063 > s002-0045.global.adm.microsoft-ds: P 14872:15108(236) ack 8320 win 64875
16:52:00.356713
IP e002-1114.global.adm.1063 > s002-0045.global.adm.microsoft-ds: P 15108:15324(216) ack 8452 win 64743
16:52:00.356727
IP e002-1114.global.adm.1063 > s002-0045.global.adm.microsoft-ds: P 15108:15324(216) ack 8452 win 64743
16:52:00.357389
IP e0

lejoso
(usa Debian)

Enviado em 03/08/2009 - 16:58h

Verifica se o seu firewall permite que a rede 10.2.11.0 faça forward atraves da porta 445.

iptables -t filter -A FORWARD -s 10.2.11.0/27 -p tcp -m tcp --dport 445 -j ACCEPT

ou

Se nao funcionar, tenta liberar qualquer porta pra fazer forward para fazer um teste

iptables -t filter -A FORWARD -s 10.2.11.0/27 -j ACCEPT

Obs: pelo que observei sua rede tem como mascara 27, corrija a mesma se estiver errado.

Att

dpsspfc
(usa Outra)

Enviado em 04/08/2009 - 10:07h

rapaz,vou fazer um teste aqui mas já fiz esse teste, eu desabilitei o firewall e loguei deu o mesmo problema, com isso eu descobrir que não é o firewall que tá bloqueando...

Deixa eu te fazer uma pergunta: não existe algum log especifico de uma subrede que enche e com isso nãoconsegue logar?

obrigado pela ajuda!!

lejoso
(usa Debian)

Enviado em 04/08/2009 - 11:10h

Se vc desabilitar o firewall, o seu forward estara liberado para qualquer porta e qualquer lugar, porem vc nao estara fazendo o nat que é necessario para interligar as 2 redes.
Vc precisa dakela linha do MASQUERADE que te passei para fazer o nat e fazer com que as duas redes se comuniquem.
Quanto a arquivo de log, nao sei te informar.

Att,

dpsspfc
(usa Outra)

Enviado em 04/08/2009 - 14:47h

muito obrigado cara!! mas o problema persiste fiz tudo que vc falou mas continua na mesma coisa, liberei o forward total entre as subredes e não funcionou..
obrigado pelas dicas vou ver se resolvo aqui.